Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144285.roa
File: AS144285.roa (raw, json)
Hash identifier: hLUPyNgJhI4RMq7QRFg+KhiFB+qd2PdGJAGN0c+QpIs=
Subject key identifier: BE:8F:80:C4:2F:B8:3E:0A:7C:58:DE:48:7C:7A:72:29:2C:84:B9:7C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 44096C7018C2876FA315567EC95B903CE0B04504
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144285.roa
Signing time: Fri 22 May 2026 07:09:00 +0000
ROA not before: Fri 22 May 2026 07:04:00 +0000
ROA not after: Fri 21 May 2027 07:09:00 +0000
asID: 144285
IP address blocks: 240a:a663::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:09:6c:70:18:c2:87:6f:a3:15:56:7e:c9:5b:90:3c:e0:b0:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:00 2026 GMT
Not After : May 21 07:09:00 2027 GMT
Subject: CN=BE8F80C42FB83E0A7C58DE487C7A72292C84B97C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:5d:00:6f:02:d5:86:24:b0:68:09:ce:e6:
be:6f:be:14:5f:0a:e7:5d:50:c5:c7:6d:bc:7c:1e:
d1:81:9d:2f:0a:67:51:ec:b8:68:4b:5f:d3:15:7a:
29:56:ac:6c:6b:a1:e2:f7:b8:eb:96:1c:d7:59:77:
12:ff:2c:72:5e:cc:62:e9:35:1e:63:14:6d:17:4c:
31:50:91:01:1f:cc:05:bb:ba:65:88:c8:39:a4:7f:
25:04:64:b0:63:16:04:7b:ec:a1:55:18:51:22:ef:
6d:03:1a:e2:49:00:e4:aa:45:20:df:86:87:95:a3:
d5:e6:c5:7f:97:6f:ca:17:81:1e:2a:01:61:82:c5:
80:c0:9e:61:9c:98:1e:7c:d3:f7:01:47:a5:c0:5c:
f5:64:18:cf:7e:f2:f1:7a:5b:d7:b6:49:e0:25:7e:
38:98:09:e1:66:dc:57:0c:0c:6f:fe:63:08:69:db:
99:ce:4a:a7:39:05:ec:96:59:d2:0e:7c:2b:c4:39:
f0:ab:f5:56:b7:26:01:1b:8b:9b:5b:4b:0b:b8:a7:
2f:7c:ca:83:55:8b:47:be:0a:62:a1:35:1d:4b:3a:
dc:ef:5c:44:c4:9d:b3:ea:50:bd:92:47:97:3a:01:
48:b0:ec:91:47:d4:93:6c:13:61:9e:e3:b5:bf:2f:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:80:C4:2F:B8:3E:0A:7C:58:DE:48:7C:7A:72:29:2C:84:B9:7C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144285.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a663::/32
Signature Algorithm: sha256WithRSAEncryption
3a:f0:b4:f2:eb:95:0f:c8:f4:50:5a:32:ae:3f:fa:5b:6a:ef:
fd:56:88:d0:19:8b:a7:34:1e:76:ed:8a:e4:6b:b9:30:fc:20:
09:c0:d7:d1:07:5d:2b:bb:2a:66:62:23:d0:52:95:96:98:ca:
74:70:13:ef:c8:90:fb:1b:5d:72:51:fa:dc:56:18:59:bb:63:
9f:2c:51:1d:47:00:15:d0:0b:ac:4a:08:f7:9e:30:01:36:60:
74:d9:67:b3:da:25:7a:4e:b9:25:2d:10:c0:14:09:ea:51:99:
75:b0:18:97:80:95:f0:e7:fa:89:45:d4:e4:05:f0:1e:82:63:
47:e2:3e:82:a2:32:e4:53:99:dc:cc:d0:7b:4f:cd:09:8a:cf:
62:66:8d:92:cd:48:90:0d:25:b1:28:63:37:4b:06:73:67:03:
17:ab:76:86:7a:47:59:da:8d:82:21:4c:27:1b:76:1b:c1:20:
fb:f8:d2:24:eb:7f:6a:21:d1:5e:9f:89:04:3c:6c:ab:24:0b:
3e:e3:76:e7:97:1c:4b:11:82:b5:a7:50:66:bf:80:09:d9:a6:
7f:73:5b:2d:0a:8b:fe:ec:c6:06:39:08:44:e8:da:a5:ce:67:
18:ed:d0:24:2c:93:49:38:39:6b:a7:f5:f3:46:09:09:36:30:
b4:96:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client